$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa File: b7677b23-569f-3269-882c-0cdb2f1c8cad.roa (raw, json) Hash identifier: bM1LSe5t/WsrrSrV5Zdm4UjI1A4n1mpqJ1ht14JOzjw= Subject key identifier: 13:FB:8B:51:2E:B7:D9:32:10:44:AA:1B:23:21:5F:DC:C3:26:F1:B0 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584CD99CBEA7125AC4E511547810 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa Signing time: Fri 13 Feb 2026 14:00:41 +0000 ROA not before: Fri 13 Feb 2026 14:00:41 +0000 ROA not after: Thu 14 May 2026 13:00:41 +0000 asID: 31898 IP address blocks: 68.64.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:9c:be:a7:12:5a:c4:e5:11:54:78:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Feb 13 14:00:41 2026 GMT Not After : May 14 13:00:41 2026 GMT Subject: CN=622e9306-bbec-46b3-b27f-badc217148df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:1b:b8:b9:fd:f2:b7:96:1b:a8:10:cc:e2: cb:dc:17:81:ba:6e:b4:47:35:c5:e3:0f:08:01:ed: 8b:61:e7:b6:3b:a5:3d:37:a8:99:c7:e0:48:10:42: da:8e:55:7c:d9:a8:3c:78:b6:4e:dd:cf:1e:d1:72: d3:32:9e:ec:78:b5:43:e2:69:45:ed:a6:de:58:34: 1b:28:59:98:ce:64:ee:b5:86:57:f2:34:2b:27:43: 60:66:72:01:d2:de:4d:c9:b3:22:b0:ae:0a:16:07: c3:73:43:60:81:15:ef:ba:e5:64:f7:3a:a8:8f:fe: 3a:39:9e:39:45:32:72:10:7b:b5:4f:cc:ed:e0:85: 80:b4:e0:cb:8e:e5:d6:97:0e:6e:6f:ab:e6:f3:c0: be:04:42:36:69:01:a8:23:18:d1:23:02:31:7e:e3: 48:c9:af:fe:e2:28:9e:01:9c:bc:9c:77:ff:3f:b0: 81:c8:44:86:8e:8a:c1:2e:2a:24:b1:ad:e8:a2:6c: f3:ed:7c:b0:f5:6b:8d:04:fb:94:34:ca:ae:92:8f: 25:e6:fb:64:29:69:29:78:c1:33:bc:9d:87:47:c2: 89:bb:0a:24:c3:5e:12:3b:d0:8c:aa:19:55:bd:60: b4:88:ae:de:14:91:d7:c4:5f:32:e9:14:ec:33:4c: 94:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FB:8B:51:2E:B7:D9:32:10:44:AA:1B:23:21:5F:DC:C3:26:F1:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:eb:16:6f:2d:e0:7d:f8:42:54:41:94:74:81:8e:cb:07:69: 8e:2f:a7:ac:e5:9d:25:3f:c2:b3:57:4a:bf:1f:95:b8:a0:58: a6:8b:11:1a:3b:dc:d0:47:29:26:3e:7e:df:1a:e4:64:98:f7: e5:eb:25:34:c5:07:5f:60:f6:d5:8e:13:40:36:d4:d2:c0:85: ca:fd:95:99:45:b4:09:28:00:a8:03:38:7e:22:45:d5:9c:ab: 84:41:10:31:3d:ac:dc:ed:38:bf:30:f1:3f:c8:98:d5:07:66: 65:fd:fd:da:8d:1a:b1:8a:c6:da:d8:14:ac:f6:2b:26:9e:03: 0b:bf:02:bd:a4:df:d8:a5:35:d0:e2:f6:84:f3:3b:b2:b4:cb: ee:76:b3:3f:73:6d:09:8d:82:b9:bb:8d:fe:10:1e:27:44:d7: 7e:a9:24:aa:a5:7e:43:1c:b0:53:8e:a4:b9:43:dd:e9:0c:75: a6:52:0d:a6:a1:41:a1:cb:c7:c4:08:55:67:c0:52:df:6d:72: 9e:5d:be:89:ba:69:9e:68:37:0c:33:24:4e:a8:83:49:fb:19: ca:25:cd:14:d7:f3:55:bb:75:a1:e6:d3:9b:33:69:dc:02:dd: 55:a8:c8:e5:af:88:af:33:e6:6f:d2:79:96:df:5e:58:6f:60: a5:fb:11:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnL6nElrE5RFUeBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk NjIyZTkzMDYtYmJlYy00NmIzLWIyN2YtYmFkYzIxNzE0OGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVkbuLn98reWG6gQzOLL3BeBum60RzXF4w8I Ae2LYee2O6U9N6iZx+BIEELajlV82ag8eLZO3c8e0XLTMp7seLVD4mlF7abeWDQb KFmYzmTutYZX8jQrJ0NgZnIB0t5NybMisK4KFgfDc0NggRXvuuVk9zqoj/46OZ45 RTJyEHu1T8zt4IWAtODLjuXWlw5ub6vm88C+BEI2aQGoIxjRIwIxfuNIya/+4iie AZy8nHf/P7CByESGjorBLioksa3oomzz7Xyw9WuNBPuUNMquko8l5vtkKWkpeMEz vJ2HR8KJuwokw14SO9CMqhlVvWC0iK7eFJHXxF8y6RTsM0yUgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBP7i1Eut9kyEESqGyMhX9zDJvGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYjc2NzdiMjMtNTY5Zi0z MjY5LTg4MmMtMGNkYjJmMWM4Y2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXrFm8t4H34QlRBlHSBjssHaY4vp6zlnSU/wrNXSr8flbigWKaLERo7 3NBHKSY+ft8a5GSY9+XrJTTFB19g9tWOE0A21NLAhcr9lZlFtAkoAKgDOH4iRdWc q4RBEDE9rNztOL8w8T/ImNUHZmX9/dqNGrGKxtrYFKz2KyaeAwu/Ar2k39ilNdDi 9oTzO7K0y+52sz9zbQmNgrm7jf4QHidE136pJKqlfkMcsFOOpLlD3ekMdaZSDaah QaHLx8QIVWfAUt9tcp5dvom6aZ5oNwwzJE6og0n7GcolzRTX81W7daHm05szadwC 3VWoyOWviK8z5m/SeZbfXlhvYKX7EXo= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:56 2026 by rpki-client